Vehicle IDPS Resource-Aware Detection Allocation for ECU Stability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Intrusion Detection and Prevention Systems (IDPS) in vehicles consume significant ECU resources, leading to degradation of fundamental system performance due to continuous operation, which is not efficient for systems with limited resources.
Innovation Solution
A dynamic allocation method for IDPS that monitors ECU resource usage and selectively deactivates or activates detection methods based on real-time resource availability, prioritizing essential ECU functions by managing IDPS resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IDPS module runs continuously in the background to detect and prevent intrusions, then security protection capability is improved, but ECU resource consumption increases
Solution Approach 1:
The IDPS module transitions from a static continuous operation mode to a dynamic mode where detection methods are selectively activated or deactivated based on real-time resource usage conditions. The control unit adjusts the operational state of detection methods according to current ECU resource availability, enabling the system to adapt its security monitoring intensity to available resources.
Solution Approach 2:
The system changes the operational parameters of the IDPS module by adjusting which detection methods are active based on resource usage thresholds. When resource usage exceeds predefined thresholds, less critical detection methods are deactivated, thereby changing the operational characteristics of the security module to reduce resource consumption while maintaining essential security functions.
2Measurement precision
If IDPS module performs comprehensive detection functions, then intrusion detection capability is improved, but ECU system performance degrades
Solution Approach 1:
The IDPS detection functionality is segmented into multiple independent detection methods with different resource requirements and priority levels. The control unit can selectively activate or deactivate specific detection methods based on current resource conditions, allowing the system to maintain essential intrusion detection capabilities while reducing overall resource consumption when needed.
Solution Approach 2:
The system implements partial action by activating only the necessary detection methods based on current resource availability and security requirements. When resources are constrained, the system performs a subset of full detection functions, focusing on high-priority detection methods while deactivating lower-priority ones, thereby maintaining adequate security monitoring without overwhelming ECU resources.
3Adaptability or versatility
If multiple detection methods are activated simultaneously, then detection coverage is improved, but resource usage increases
Solution Approach 1:
The system dynamically adjusts the number and type of active detection methods based on real-time resource usage monitoring. The control unit evaluates current resource conditions and selectively activates or deactivates detection methods to maintain an optimal balance between detection coverage and resource consumption, allowing the system to adapt its detection portfolio to available resources.
Solution Approach 2:
The IDPS module employs a composite structure of multiple detection methods with different characteristics and resource requirements. By combining high-priority essential detection methods with lower-priority supplementary methods, the system creates a layered detection approach that provides comprehensive coverage when resources allow, while maintaining core security functions when resources are constrained.
Data Source
AI summary
An Intrusion Detection and Prevention System (IDPS) dynamic allocation device includes a resource amount information receiving unit configured to receive information about resource usage, including Electronic Control Unit (ECU) usage and IDPS usage, from an ECU resource amount measuring module. The IDPS dynamic allocation device also includes a resource usage determining unit configured to determine whether the resource usage exceeds a usage allowance. The IDPS dynamic allocation device further includes a resource usage control unit configured to deactivate at least one detection method to reduce the IDPS usage when the resource usage exceeds the usage allowance. The resource usage control unit is configured to selectively deactivate a detection method that has a lowest priority based on a detection method priority table and has at least one similar detection method.